CVE-2006-0009
- State
- Published
- Severity
- Not scored
- Published
- Mar 14, 2006
- Updated
- Aug 7, 2024
- Reserved
- Nov 9, 2005
Description
Buffer overflow in Microsoft Office 2000 SP3, XP SP3, and other versions and packages, allows user-assisted attackers to execute arbitrary code via a routing slip that is longer than specified by the provided length field, as exploited by malware such as TROJ_MDROPPER.BH and Trojan.PPDropper.E in attacks against PowerPoint.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20060422 PowerPoint Phishing Trojanmailing-list
- ADV-2006-3678vdb-entry
- VU#682820third-party-advisory
- oval:org.mitre.oval:def:1504vdb-entrysignature
- http://www.symantec.com/security_response/writeup.jsp?docid=2006-091810-5028-99
- ADV-2006-0950vdb-entry
- oval:org.mitre.oval:def:1653vdb-entrysignature
- http://www.symantec.com/enterprise/research/SYMSA-2006-001.txt
- 20060822 Major updates in PowerPoint FAQ document - not a 0-day issuemailing-list
- 20059vdb-entry
- 20060314 SYMSA-2006-001: Buffer overflow in Microsoft Office 2000, Office XP (2002), and Office 2003 Routing Slip Metadatamailing-list
- http://www.darkreading.com/document.asp?doc_id=101970
- 1016886vdb-entry
- http://isc.sans.org/diary.php?storyid=1618
- http://blogs.securiteam.com/?author=28
- powerpoint-presentation-code-execution(29009)vdb-entry
- 17000vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2006-069.htm
- 19238third-party-advisory
- http://blogs.securiteam.com/?p=557
- 20060919 Microsoft PowerPoint 0-day Vulnerability FAQ - September writtenmailing-list
- 1016720vdb-entry
- http://blogs.securiteam.com/?p=559
- TA06-073Athird-party-advisory
- office-routing-slip-bo(25009)vdb-entry
- 20060919 New PowerPoint 0-day Trojan in the wildmailing-list
- oval:org.mitre.oval:def:798vdb-entrysignature
- 19138third-party-advisory
- oval:org.mitre.oval:def:1553vdb-entrysignature
- 23903vdb-entry
- 20060819 New PowerPoint 0-day and Trojan - FAQ document readymailing-list
- 20060919 New PowerPoint 0-day Trojan in the wildmailing-list
- 20060822 Major updates in PowerPoint FAQ document - not a 0-day issuemailing-list
- 1015766vdb-entry
- http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=TROJ_MDROPPER.BH
- MS06-012vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.